MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
425fffb8ea86bf264fb65962d34b65acbdf3cc7f5faa16435b01838c1577041b	PE32	2024-09-29 14:39:49 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/contentis_base64 [+] YRP/domain YRP/Dropper_Strings YRP/IsPE32 YRP/IsWindowsGUI YRP/IsBeyondImageSize YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3
68af772fa5381e1fc35c0ea1fc319de805a0e4231e1c638c25f35d44690356b1	PE32	2024-09-29 14:39:46 UTC	User Submission	YRP/Delphi_Random YRP/Delphi_CompareCall YRP/Delphi_Copy [+] YRP/Delphi_StrToInt YRP/contentis_base64 YRP/domain YRP/gem YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/Borland_Delphi_40_additional YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/BobSoft_Mini_Delphi_BoB_BobSoft_additional YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/Borland YRP/BobSoftMiniDelphiBoBBobSoft YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/borland_delphi
001c46a53f5dd7733e63efaa4cc684cc3ee68c7391e1d0c255ca4b792d13e92a	PE32	2024-09-29 14:39:42 UTC	User Submission	YRP/Big_Numbers0 YRP/Big_Numbers1 YRP/Big_Numbers2 [+] YRP/CRC32_poly_Constant YRP/CRC32_table YRP/BASE64_table YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/excel_2007 YRP/excel_XML YRP/corel_draw_compressed YRP/gem YRP/odg YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/_3dxml_compressed YRP/Browsers YRP/Misc_Suspicious_Strings YRP/network_http YRP/network_tcp_socket YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/android_meterpreter YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section YRP/UPX YRP/Nullsoft_PiMP_Stub_SFX YRP/Borland YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
9c1b86f06721fd1741c52531e098c624d522ea2f01c352eded8650497f0a3915	PDF	2024-09-29 14:39:31 UTC	User Submission	YRP/Big_Numbers1 YRP/suspicious_creator YRP/invalid_trailer_structure [+] YRP/multiple_versions YRP/contentis_base64 YRP/domain YRP/url YRP/pdf YRP/jpeg
4df0a4e1d8da699b9df24fe5b4f1870ab22f93024bd4d4cf2563682b46adf409	PE32	2024-09-29 14:39:23 UTC	User Submission	YRP/BLOWFISH_Constants YRP/BASE64_table YRP/contentis_base64 [+] YRP/domain YRP/win_mutex YRP/win_registry YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Armadillo_v1xx_v2xx_additional YRP/Microsoft_Visual_Cpp_60_DLL_additional YRP/Microsoft_Visual_Cpp_v70_DLL YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Microsoft_Visual_Cpp_60_DLL_Debug YRP/Armadillo_v1xx_v2xx YRP/Microsoft_Visual_Cpp_v60_DLL YRP/Microsoft_Visual_Cpp_60_DLL YRP/Microsoft_Visual_Cpp_60 YRP/Armadillov1xxv2xx YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasRichSignature
e571fd65a2d309b2aad2ed9d8b828961d93e0942cb62880c65fbba89e0d7aca9	data	2024-09-29 14:39:21 UTC	User Submission	CuckooSandbox/vmdetect
d6d07c5819ed3c287c1b7b597f8a1314cec513b9e58e81d0f7e0547865beb674	PE32	2024-09-29 14:39:18 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/SEH__vba [+] YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
4e9f0c619830dacc1c828f4440d3ee9e96dfbca4beb768b2ce579913c47c4741	PE32	2024-09-29 14:39:16 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/Dropper_Strings YRP/network_tcp_socket YRP/network_dns YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Microsoft_Visual_Basic_v50 YRP/IsPE32 YRP/IsWindowsGUI YRP/FASM FlorianRoth/DragonFly_APT_Sep17_3
f7ceb0440f521f883ffa7e582ea2c6a2cc2bb89e75bfb4211ee1e54fe242c86e	PE32	2024-09-29 14:39:14 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/wmf [+] YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked
327aecef921b88e608aca520101923329ef16ee150d8b2062c2a5f16a0349ecd	PE32	2024-09-29 14:39:11 UTC	User Submission	YRP/Big_Numbers1 YRP/MD5_Constants YRP/contentis_base64 [+] YRP/domain YRP/gem YRP/prc YRP/Dropper_Strings YRP/anti_dbg YRP/network_http YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature